EC-CouncilEC-Council Certified SOC Analyst (CSA)
EC-Council Certified SOC Analyst (CSA) validates the skills of a tier 1 and tier 2 security operations centre analyst: monitoring, triage, log analysis and escalation of security events. It suits SOC analysts, network and security administrators, and graduates starting a career in security operations.
The certification is earned through exam 312-39, covering SOC processes, the threat landscape, SIEM deployment and use cases, log management, threat intelligence and incident response. Preparation follows the CSA v2 curriculum with SIEM-based labs, alert investigation exercises and practice questions that build the habits of an effective analyst.
Your path to certification
Prepare
Start from where you are; we help you assess your level.
Train
1 course with an instructor
Sit the exam
CSA (312-39)
Stay current
Renew CSA every three years by logging 120 EC-Council continuing education credits and keeping the annual fee up to date.
Where do you sit the exam? Online exam
This exam is taken through EC-Council's own ECC Exam portal rather than through Pearson VUE. We prepare you for it and help you register.
Preparation courses
Renewal and validity
Each certification in EC-Council's continuing professional education (CPE) scheme, previously known as ECE, needs its own 120 credits within its three-year window, earned through relevant activity such as events, courses, research or a newer exam version, while the annual fee keeps the certificate active year by year. EC-Council revises the scheme from time to time, so confirm the current CPE policy on its certification site.
Let's plan your next step together.
Tell us the course or certification you have in mind and we'll send the outline, upcoming dates, fees and private-team options.